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Abstract — It is proved an amplification of Cusick-Cheon's 
conjecture on balanced Boolean functions in the cosets of the 
binary Reed-Muller code RM(k, m) of order k and length 2 m , 
in the cases where k — 1 or k > (m — l)/2. 

Index Terms — Boolean function, Reed-Muller code, coset of 
linear code, Walsh-Hadamard transform. 

I. Introduction 

For basic definitions and facts we refer to [8]. Let 
RM(k 1 m) denote the fcth-order Reed-Muller code of length 
2™. This linear code consists of all binary vectors of length 2 m 
(truth tables) associated with Boolean functions in to variables 
whose degree is less than or equal to k. A Boolean function 
is said to be balanced if its truth table contains equal number 
of zeroes and ones. We shall also call a truth table of a 
balanced Boolean function balanced word. In [4], the authors 
have conjectured the following: 

Conjecture 1.1: The code RM(k,m), k > 0, consid- 
ered as a coset in the quotient space Q(k,m) d = RM(k + 
1, m)/RM(k, to) has more balanced functions than any other 
coset in Q(k, to). 

This conjecture was verified in cases k = 1, m — 2 [5]. 
Based on it the authors of [4] derived very good upper and 
lower bounds on the number of balanced Boolean functions 
which are contained in RM(k, to). For some particular values 
of k and arbitrary to, explicit formulas for the number of 
balanced functions in RM(k,m) are known [8], [10]. Apart 
from trivial cases (k — l,m — 1 and m) there are such 
formulas for k = 2 and k = to — 2, as a part of the known 
weight-distribution of the corresponding Reed-Muller codes. 
However, the problem of determining the weight-distribution 
of RM(k,m) in general, seems to be difficult [8] and even 
partial results are welcomed [7]. For similar results in the 
context of cryptographic applications, see also [2], [3] and 
[11, Ch. 8]. 

This paper is organized as follows. In next section we 
summarize necessary background. In Section III we present 
proofs of the extension of Conjecture 1 1.1 1 for arbitrary coset of 
the RM(k, m), if k = 1 or k > (m - l)/2. Finally, in Section 
IV we give an example which illustrates these considerations. 

II. Background 

Let us recall the so-called MacWilliams's identity [8, p. 
127]. 
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Theorem 2.1: Let A be a binary linear (n, K) code and 
(Aq, A\, . . . , A n ) denote the weight distribution of A i.e. the 
total number of vectors of weight i in A is Ai for each i. 
Then 



^a,x i = 2 K - n J2 B i( 1 + x) n - i (i -xy 



(1) 



where Bi is the total number of vectors of weight i in A , 
the orthogonal code of A. 

We make use also of the following result proven by Assmus 
and Mattson. 

Theorem 2.2: ([1]) Let A be a binary linear (n,K) code 
and a be an n— vector over F2 = GF(2) not in A. Let 
(do, d±, . . . , d n ) denote the weight distribution of the coset 
A + a; thus the total number of vectors of weight i in A + a 
is di for each i. Then 

n n 

4X ! - 2 K - n ^(26, - Bi)(l + X)"-*(l - X)*, (2) 

where 6; is defined as the number of vectors of weight i in 
the orthogonal code A 1 - that are also orthogonal to a and Bi 
is the total number of vectors of weight i in A- 1 . 
The above results were stated for a linear code over an 
arbitrary finite field, but for our goals these particular versions 
are enough. 

The following deep theorem is due to McEliece. 

Theorem 2.3: ([9]) The weight of every codeword in 
RM(k,m) is divisible by 2^ m ~ 1 ^ k l 

Let us remind also the following definition. 

Definition 2.4: [8, p. 151] For an arbitrary positive in- 
teger n the Krawtchouk polynomial (x; n) = Pk (x) is 
defined as 



P fc (x; n 
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k = 0,1,2,..., where as usual x is a variable while the 
binomial coefficients are defined as in Ex. 18 [8, Ch. 1]. 
Note that Pfe(x) is a polynomial of degree k. 

For the sake of completeness we recall the definitions of 
weight and Walsh-Hadamard transform of a Boolean function. 
Below, "XT' stands for the ordinary summation, while "+" is 
used for the modulo-2 summation. 

The weight of a Boolean function / is equal to the number 
of nonzero positions in the truth table of / and is denoted by 
wt(f). A Boolean function / is uniquely determined by its 



Walsh-Hadamard transform, which is a real-valued function 
over F™ defined for all ui € FJj 1 as 

W/(u) = (-l) /(x)+x ^ = 2 m - 2wt(f + x • u) , (3) 
xeF» 

Here the dot product or scalar product of the vectors x = 
(x%, X2, ■ ■ ■ ,x m ) and u> = (wi, 0J2, ■ ■ ■ , (*>m) is defined as 

x • oj = xi^i + a; 2 ^2 H h x m uj m . 

It is easy to see that the Boolean function / is balanced if 
and only if Wf(0) = 0. We recall also, the so-called Parseval's 
equation: 

W f {uj) 2 = 2 2m (4) 

III. The Proofs 

First, we shall prove the following lemma. 

Lemma 3.1: For an arbitrary even positive integer n and 

1 = 0, 1, . . . , n let us define the numbers K(i, n) as 

*(i,»)=' D-l)^.) („" 2 "_' 3 .). 

Then K(i,n) is equal to for i odd, negative when i = 

2 (mod 4) and positive when i = (mod 4). 

Proof: Note that K(i,n) is actually -P„/ 2 (i), where 
P n / 2 (x) is the Krawtchouk polynomial of degree n/2. Further 
we make use of the Ex. 46 [8, p. 153] which states that for 
arbitrary nonnegative integers i and j the following recurrent 
formula holds: 

(n - i)Pj(i + 1) = (n - 2j)P i (i) - iP 3 {i - 1), 

where Pji'x) is the Krawtchouk polynomial of degree j. In 
our case j = n/2, thus we have: 

{n - i)P n/2 {i + I) = -iP n/2 (i - I) (5) 

The initial values: -P n / 2 (0) = („™ 2 ) an( ^ -fn/ 2 (-0 — 316 
easily computed (see e.g. equation 5.57 and Ex. 44 [8, pp. 
151-153]). The proof follows by induction on i using recurrent 
relation ((5]). ■ 

Now, we shall prove an amplification of Cusick-Cheon's 
conjecture in some special cases. 

Theorem 3.2: Let B(k, to) be the number of balanced 
words in the binary Reed-Muller code RM(k,m),k > 
(to — l)/2. Then any nontrivial coset of RM(k 1 m) contains 
less than B(k,m) balanced words. 

Proof: Let a be a binary vector of length n = 2 m not 
in A = RM(k, to) and C = A + a be the considered coset. 
It is well-known that the dimension of A is K = Yl^=o ("j) 
and the orthogonal code A^ coincides to RM(m — k — 1, to). 
Let hi be the number of vectors of weight i in A 1 - that are 
orthogonal to a and Bi is the total number of vectors of weight 
i in A^, < i < n. Applying Theorem 12. II and Theorem 12.21 
we get, respectively: 

n 

B(k, m) = 2 K ~ n BiK(i, n) 

i=0 



d n/2 =2 K - n J2(2b l -B l )K(t,n), 

i=0 

where d„/ 2 is the number of balanced words in C and the 
numbers K(i,n) are defined in Lemma |3~T1 So, we yield: 

n 

B(k, to) - d n/2 = 2 K ' n+1 Y / (B l - h)K(i, n) (6) 

i=0 

Clearly, by definition of the numbers Bi and bi, we have: 
Bi > bi. Also, there exists at least one weight i for which 
last inequality holds strictly, since, otherwise the vector a 
must belong to A. Furthermore, if k > (to — l)/2 then 
(to — 1)/(to — k — 1) > 2, and hence according to McEliece's 
Theorem all weights of codewords in A 1 - are divisible by 
4. Thus, by Lemma [3~T1 the numbers K(i,n) are positive and 
consequently, the sum in equation © is positive as well, which 
completes the proof. ■ 

Finally, we shall prove the following extension of the 
Conjecture 1 1.1 1 in the case where k = 1: 

Proposition 3.3: Any nontrivial coset of the first order bi- 
nary Reed-Muller code RM(1, to) contains less than 2 m+1 — 2 
balanced words. 

Proof: First, let us note that the number of balanced 
words in RM(1, to) itself, is 2 m+1 — 2, and the two unbalanced 
words are the all-zero and all-one vectors of length 2 m . 

Let / be an arbitrary non-affine function and f be its corre- 
sponding truth table. We consider the coset C = RM(1, to) + 
f . By the Parseval's equation there exists at least one u>, say 
ljq, such that Wf(ujQ) ^ 0. Let g = f + x • cvq. Clearly, 
Wf(ujQ) — W g (0) and therefore the function g is unbalanced, 
as well as g + 1, of course. Suppose, g and g + 1 are the 
only two unbalanced functions (words) in C. Then obviously, 
Wf(ui) = 0, for oj 7^ luq and by the Parseval's equation 
Wf(ojo) — ±2™\ Hence, according to (0), wt(g) is equal 
to either or 2 m , which means that either / = x ■ ojq or 
/ = x-cJq + 1, a contradiction to a choice of /. Consequently, 
C contains more than two unbalanced words which completes 
the proof. ■ 

IV. An Example 

In this section we present an example which illustrates the 
above considerations. We shall use the same notations as in 
the proof of Theorem 13.21 

Consider the (to — 2)th order Reed-Muller code RM(m — 
2, to), to > 3, which is in fact the extended Hamming code of 
length n — 2™\ The orthogonal code is the first-order Reed- 
Muller code RM(l,m) and consists of truth tables of the 
affine functions and the vectors 0,1. So, the nonzero B's are: 
B 2m -i = 2 m+1 - 2 and B t = 1 for i = 0, 2 m . Applying 
equation (Q~|i for the weight-distribution of the code H m = 
RM(m — 2, to), we get the well-known (see e.g. [10]): 

n 

HiX. 1 = 2~( m+1 )[(l + X)" + (2 m+1 - 2)(1 - X 2 )"/ 2 + 

(1 - X)»] 

Thus, we have: 

fl( m -2 >m) = ^ = i[(^ 2 ) + (n-l)(^)] 



Let ai be the following 2 m — vector of weight 2: 
(0, 0, . . . , 1, 1). This vector is associated with the Boolean 
function which is a product of the first m — 1 amongst 
the Boolean variables Y\, . . . , Y m ^i, Y m i.e. the function: 
Y1Y2 ■ • ■ Ym-i- ^ is eas y to see that the truth table of an affine 
function is orthogonal to ai only if this function does not 
contain Y m as an essential variable. So, 6 2 ™-i = 2 m — 2 and 
since the vectors 0, 1 are orthogonal to ai it follows &o = 
&2"» = 1. Applying equation (O for the weight-distribution of 
the coset Ci = H„, + ai, we get: 

n 

dtX 1 = 2- {m+1 ^ [(1 + X)" - 2(1 - X 2 )™/ 2 + (1 - X)™] 

i=0 

Therefore, we have: 



If n \ _ fn/V> 
n\n/2j W 4 / 

This result coincides with the outcome of computations given 
in [5]. In fact, it can be shown that all cosets of RM(m—2, to) 
in RM(m — l,m) are affine equivalent (see, e.g. [6]) and 
therefore they have the same weight-distribution (in particular, 
the same number of balanced functions). 

Let, now a 2 be the following 2 m — vector of weight 1: 
(0, 0, . . . , 0, 1). This vector is associated with the Boolean 
function Y{Y^ . . . Y m -\Y m . Of course, we can proceed as in 
the previous case, but the following simple arguments show 
that every word in the coset C 2 = H rn + a 2 is with odd 
weight. Indeed, if f S H m then wt({) is an even number and 
wt(i + a 2 ) is equal to wt(f) ± 1 accordingly to the value of 
the last coordinate of f . Thus, there are no balanced functions 
in the coset C 2 , and by similar arguments this is valid also 
for all cosets of RM(m — 2, to) not in RM(m — 1, to). 
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V. Conclusion 

In this paper, we consider an extension of Cusick-Cheon's 
conjecture on balanced Boolean functions in the cosets of 
the binary Reed-Muller code RM(k,m) and prove it in the 
special cases: k — 1 or k > (to — l)/2. To our knowledge, the 
Conjecture |l.l| is still unproved (or disproved) in the remaining 
cases. Note also, that Theorem 13.21 is valid for any code of 
even length whose orthogonal is doubly-even code i.e. if the 
weights of all codewords in the orthogonal code are divisible 
by 4. 
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